This Privacy Policy explains how Audience Alchemy collects, uses, and protects personal data submitted through this website, in accordance with the UK GDPR and the Data Protection Act 2018.
1. Who we are
Audience Alchemy ("we", "us", "our") is a UK-based growth marketing and shadow-operator service. For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, Audience Alchemy is the data controller for personal data submitted through this website.
If you have any questions about this policy or how your data is handled, please contact us via the enquiry form on the homepage.
2. What data we collect
When you complete our enquiry form, we collect:
- Your name
- Your email address
- Your Instagram handle
- Your location (city, region, or country you are based in)
- The information you share about yourself in the message field
We also automatically collect limited technical data such as your browser type, device information, and approximate location derived from your IP address, for security and analytics purposes.
3. How we use your data and our lawful basis
We process your personal data on the following lawful bases under Article 6 of the UK GDPR:
- Legitimate interests — to respond to your enquiry, assess whether our services are a fit, and contact you about working together.
- Consent — where you opt in to receive further communications, marketing, or updates. You may withdraw consent at any time.
- Legal obligation — to keep records required by UK tax, accounting, and regulatory law.
4. Who we share your data with
We do not sell your personal data. We may share it with:
- Trusted service providers (e.g. email, hosting, form processing) acting as data processors under contract.
- Professional advisors such as accountants or legal counsel where required.
- Regulators or law enforcement where we are legally required to do so.
Some of our service providers may be based outside the UK. Where this is the case, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement or Standard Contractual Clauses.
5. How long we keep your data
We retain enquiry data for up to 24 months from your last contact with us, after which it is securely deleted, unless we are required to keep it longer for legal or accounting purposes. Client records are retained for up to 7 years to meet UK tax and accounting requirements.
6. How we protect your data
We use industry-standard technical and organisational measures to protect your personal data, including encrypted transmission (HTTPS), access controls, and secure third-party processors. No system is completely secure, but we take reasonable steps to safeguard your information.
7. Your rights under UK GDPR
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your data ("right to be forgotten")
- Restrict or object to certain processing
- Request data portability
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk
To exercise any of these rights, please contact us via the enquiry form. We will respond within one month, as required by law.
8. Cookies and analytics
This site uses only essential cookies required for it to function. If we add analytics or marketing cookies in future, we will request your consent first via a cookie banner.
9. Changes to this policy
We may update this policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated where appropriate.
10. Contact
For any privacy-related questions or requests, please use the enquiry form on the homepage.